@highflame/policy 2.2.1 → 2.2.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -421,18 +421,18 @@ export const GUARDRAILS_DETECTORS = [
421
421
  exampleAttacks: [],
422
422
  },
423
423
  {
424
- id: "operation_classifier",
425
- displayName: "Tool Operation Classifier",
424
+ id: "bash_ast_classifier",
425
+ displayName: "Bash Operation Classifier",
426
426
  category: "tool_safety",
427
427
  stability: "stable",
428
428
  tier: "fast",
429
429
  inhouse: false,
430
430
  model: null,
431
- latencyP50Ms: 1,
432
- emits: [{ name: "tool_operation_classes", type: "Set<String>", modifiable: false, semantic: "category_set", description: "Operation classes detected in the tool call (read, write, execute, network, delete, unknown)." }],
431
+ latencyP50Ms: 2,
432
+ emits: [{ name: "tool_operation_classes", type: "Set<String>", modifiable: false, semantic: "category_set", description: "Operation classes parsed from the command (e.g. file_delete, network_egress, privilege_escalation)." }],
433
433
  supportedModes: ["enforce", "monitor", "alert"],
434
- defendsAgainst: ["excessive_agency"],
435
- exampleAttacks: [],
434
+ defendsAgainst: ["command_injection", "unauthorized_access"],
435
+ exampleAttacks: [{ title: "Destructive shell op", vulnerabilityId: "command_injection", snippet: "rm -rf / --no-preserve-root", expectedSignal: {} }],
436
436
  },
437
437
  ];
438
438
  // Semantic field → contributing detector ids (producesAttrs + normalizationAliases,
@@ -554,7 +554,7 @@ export const GUARDRAILS_FIELD_TO_DETECTORS = {
554
554
  "tool_is_builtin": ["tool_risk"],
555
555
  "tool_is_sensitive": ["tool_risk"],
556
556
  "tool_name": ["tool_risk"],
557
- "tool_operation_classes": ["operation_classifier"],
557
+ "tool_operation_classes": ["bash_ast_classifier"],
558
558
  "tool_poisoning_detected": ["tool_poisoning"],
559
559
  "tool_poisoning_score": ["tool_poisoning"],
560
560
  "tool_poisoning_type": ["tool_poisoning"],
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@highflame/policy",
3
- "version": "2.2.1",
3
+ "version": "2.2.3",
4
4
  "engines": {
5
5
  "node": ">=18"
6
6
  },